google-nomulus/proxy/terraform/modules
Lai Jiang a6aa1ca9fe Protect KMS-secured data against destruction in upcoming google provider update. (#284)
Export of cl/270900150.

To refer to a KMS key or key ring, we should use the stable `.self_link`. Using `.id` instead provides an unstable identifier which may change (and it will change in the upcoming update of the google provider to 2.9.1). A change in the identifier will cause Terraform to destroy and recreate the key. Destroying the key means all data associated with it is lost; the key cannot be recreated.

This CL replaces `.id` with `.self_link`, so all of those problems will not happen. In addition, `prevent_destroy` protects the key against delete-and-recreate in general.
2019-09-27 12:12:58 -04:00
..
gke Move terraform and kubernetes folder to be under proxy (#127) 2019-06-20 14:28:32 -04:00
networking Move terraform and kubernetes folder to be under proxy (#127) 2019-06-20 14:28:32 -04:00
common.tf Move terraform and kubernetes folder to be under proxy (#127) 2019-06-20 14:28:32 -04:00
gcs.tf Update IAM binding to restrict proxy service account's access to GCS (#125) 2019-06-21 15:59:01 -04:00
gke.tf Move terraform and kubernetes folder to be under proxy (#127) 2019-06-20 14:28:32 -04:00
iam.tf Update IAM binding to restrict proxy service account's access to GCS (#125) 2019-06-21 15:59:01 -04:00
kms.tf Protect KMS-secured data against destruction in upcoming google provider update. (#284) 2019-09-27 12:12:58 -04:00
networking.tf Move terraform and kubernetes folder to be under proxy (#127) 2019-06-20 14:28:32 -04:00
output.tf Move terraform and kubernetes folder to be under proxy (#127) 2019-06-20 14:28:32 -04:00
variables.tf Move terraform and kubernetes folder to be under proxy (#127) 2019-06-20 14:28:32 -04:00